SSL Error - Cretificate reported as expired

jkor...@gmail.com

unread,

Jul 14, 2020, 1:26:19 PM7/14/20

to TortoiseSVN

Using a fresh install of 1.14.0, when I try to check out an SVN repository, I get a report about the SSL certificate. The issuer (Comodo) is unknown and that it has expired. It hasn't. I don't get any similar messages when visiting the same page with any web browser.

Tortoise SSL Error.png

Stefan

unread,

Jul 14, 2020, 3:10:00 PM7/14/20

to TortoiseSVN

that error is returned by the svn library (well, the openssl lib that svn uses).

Try the command line client - you'll get the same error.

The report it on the svn users mailing list.

Pavel Lyalyakin

unread,

Jul 20, 2020, 9:28:27 AM7/20/20

to TortoiseSVN

Hello,

What Subversion server distribution do you use? What is the version? If you use an up to date VisualSVN Server version, the problem most likely will not occur. If it occurs, try re-importing the certificate again - modern VisualSVN Server versions build a certificate chain automatically when you import a certificate.

It appears that the warning occurs because you use a certificate issued by Sectigo (former Comodo) and its AddTrust root certificate has expired on May 30, 2020. This should not be a problem with web browsers, but some clients can start to show warnings in this case because they cannot build a trusted certificate chain on the client side. For example, see the result on the following web page: https://whatsmychaincert.com/?intelli4m.com.

[[[

intelli4m.com has a trusted chain containing an expired certificate. This chain will work with modern web browsers (they will use a chain to a different trusted root) but may fail with older clients, notably OpenSSL 1.0.x.

]]]

You can also find more details on the problem on the following pages:

* https://support.sectigo.com/articles/Knowledge/Sectigo-AddTrust-External-CA-Root-Expiring-May-30-2020

* https://nakedsecurity.sophos.com/2020/06/02/the-mystery-of-the-expiring-sectigo-web-certificate/

* https://www.agwa.name/blog/post/fixing_the_addtrust_root_expiration

* https://www.theregister.com/2020/06/02/sectigo_root_cert_expires/

On Tue, Jul 14, 2020 at 8:26 PM <tortoisesvn+APn2wQe1xlfGgX4nlQYM...@googlegroups.com> wrote:

Using a fresh install of 1.14.0, when I try to check out an SVN repository, I get a report about the SSL certificate. The issuer (Comodo) is unknown and that it has expired. It hasn't. I don't get any similar messages when visiting the same page with any web browser.

--
You received this message because you are subscribed to the Google Groups "TortoiseSVN" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tortoisesvn...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/tortoisesvn/6abc4422-34bf-4ef6-afe8-d11c9d5cef49o%40googlegroups.com.